20 unchanged sentences
• Third-Party Risk Management:
−Removed: We maintain a risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of our systems, as well as the
−Removed: systems of third parties that could adversely impact our business in the event of a cybersecurity incident affecting those third-party systems.
+Added: We maintain a risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, including vendors, service providers and other external users of our systems, as well as the systems of third parties that could adversely impact our business in the event of a cybersecurity incident affecting those third-party systems.
• Education and Awareness:
2 unchanged sentences
We have established and maintain incident response and recovery plans for critical systems, applications and business functions that address our response to a cybersecurity incident, and such plans are tested and evaluated on a periodic basis.
−Removed: We describe whether and how risks from identified cybersecurity threats, including as a result of previous incidents, may materially affect, or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, under the heading “ Failure to maintain the integrity of internal or customer data or to protect our systems from cyber-attacks could disrupt our business, damage our reputation, and subject us to significant costs, fines or lawsuits ” included as part of our risk factor disclosures included in Part I, Item 1A of this Annual Report filed on Form 10-K.
+Added: We describe whether and how risks from identified cybersecurity threats, including as a result of previous incidents, may materially affect, or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, under the heading “ Failure to maintain the integrity of internal or customer data or to protect our systems from cyber-attacks could disrupt our business, damage our reputation, and subject us to significant costs,
+Added: fines or lawsuits ” included as part of our risk factor disclosures included in Part I, Item 1A of this Annual Report filed on Form 10-K.
Cybersecurity Governance
12 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.